
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
File: JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json)
Hash identifier: jx2fyBnocWaTlqv+7xd44RFKXeYbj7uDQECUZ1jxaH4=
Subject key identifier: 3B:CD:29:33:E9:08:D1:F9:63:C4:DF:83:8D:2E:F1:25:E0:DD:EB:74
Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C
Certificate issuer: /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
Manifest number: 0207
Signing time: Thu 23 Jul 2026 04:26:21 +0000
Manifest this update: Thu 23 Jul 2026 04:26:20 +0000
Manifest next update: Thu 30 Jul 2026 04:26:20 +0000
Files and hashes: 1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: bQ06+jLUAfqTDcPkzmPebVGsSmOdxcT8FBmXII+3s2A=)
2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: Fx8pr8XvKDN4R+SF/zRwvHYyEvKW8jczksOxopP8w7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl
rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
Validity
Not Before: Jul 23 04:26:20 2026 GMT
Not After : Jul 30 04:26:20 2026 GMT
Subject: CN=6a6197ed-305d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:da:d7:8d:71:33:10:a1:1a:e0:ea:f2:02:
21:e1:79:dd:0d:50:f1:8f:2f:a7:ba:a8:21:d6:3c:
2a:39:44:28:91:26:67:b4:89:7d:c6:c2:93:70:8b:
28:4f:93:63:28:2c:81:32:55:76:ff:30:84:ec:f2:
e2:58:67:c8:a6:96:ee:9b:93:26:ba:9f:2f:37:7c:
a5:84:d6:05:05:ad:d8:2a:ff:06:cc:be:db:d7:c6:
c7:5e:08:8b:4c:a4:f3:4d:30:b7:66:3a:42:49:22:
cb:d5:cb:4b:d3:a1:3f:d4:46:9b:88:91:13:a7:3b:
0a:e3:1c:40:53:fd:1f:45:20:51:af:38:fb:f8:ea:
05:d2:10:f5:15:25:6e:91:83:5e:9f:ea:89:ca:7e:
30:c9:f5:eb:a8:64:4c:20:d5:f4:44:2d:ce:8b:43:
7c:a6:b5:4d:85:67:b4:81:ff:9e:0a:77:69:22:e0:
6d:b4:58:b0:36:9b:f4:fb:f2:b1:6f:d8:40:c2:59:
a8:55:ef:04:c9:f4:4d:20:42:25:ef:04:e0:cb:4f:
e4:a5:7c:15:bc:4f:8e:c3:7f:4f:65:0e:1d:76:09:
bb:ce:1c:52:a4:17:6b:03:7d:be:c7:66:bf:d4:29:
59:da:31:7a:83:e0:a2:c7:86:36:d9:b4:22:9d:80:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:29:33:E9:08:D1:F9:63:C4:DF:83:8D:2E:F1:25:E0:DD:EB:74
X509v3 Authority Key Identifier:
keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:d5:ec:fd:d7:5d:6f:34:2d:46:ab:2a:76:f9:fc:da:76:
4f:4b:5e:97:85:44:d1:bc:0b:5a:4b:15:cd:92:69:50:95:49:
f9:d3:38:33:08:e8:ed:1f:35:f8:67:3d:bc:a6:f4:8f:de:05:
27:22:85:20:70:82:95:3b:68:c0:f5:af:4e:71:29:75:6a:db:
3f:ab:d4:f1:58:4e:e0:ac:5c:a8:c9:69:43:ab:3e:eb:2a:e6:
70:1f:a6:20:de:d0:2f:ec:21:93:21:fa:5c:06:7f:a4:72:cf:
ad:ac:c4:bc:ed:12:2a:e7:2d:1c:57:21:d3:cf:1d:36:2b:80:
29:e8:d2:ea:e3:40:f5:6e:49:3a:49:d7:fe:fa:a7:7e:85:81:
20:e8:94:9a:2d:08:4f:30:33:ef:18:19:5c:19:44:73:dc:63:
73:e7:a6:bf:b1:30:4d:a3:4c:92:c4:85:50:b2:44:2c:bb:83:
3b:48:11:ff:e6:68:e7:66:8c:5c:5e:8f:d9:63:7d:5b:96:3e:
d7:67:08:ab:18:a7:37:c0:0d:a3:62:a0:d3:7d:06:a3:0c:b6:
31:4a:fc:31:21:2d:18:04:ef:72:37:35:1b:5d:71:2b:73:cc:
f7:7b:9a:b7:7d:b5:6b:f1:ac:5f:ff:be:c8:8d:5b:db:14:49:
c1:83:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:47 2026 by rpki-client